$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa File: 3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa (raw, json) Hash identifier: f3gd5mqeqzLxhbhl4TNAIox6rxwHmO81VVvOQBMjZgU= Subject key identifier: 8B:05:0A:DC:A8:EB:91:F1:09:53:A9:63:FB:A8:74:BD:7E:A1:61:E9 Certificate issuer: /CN=627df6c2-d60a-4467-85f2-dd6d009eafe8 Certificate serial: 010D0C9F4328584F63F819777220F3AD2EDBE300 Authority key identifier: 3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 27218 IP address blocks: 192.30.120.0/23 maxlen: 23 2620:71:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:19:77:72:20:f3:ad:2e:db:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627df6c2-d60a-4467-85f2-dd6d009eafe8 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=ca648cec-a3bb-4437-9537-ca9456303dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0a:7d:a6:b7:34:85:7b:e6:82:3e:6e:3a:36: a2:a7:0d:54:6f:b1:05:c1:0b:4d:2a:b8:c7:82:7a: 21:c2:6b:f0:2d:13:8e:f6:1f:97:ca:c8:81:f6:a5: 0d:39:a0:31:30:6c:4d:6b:9a:bb:78:92:0e:dd:d4: 40:3d:4a:dc:25:ad:c4:84:1d:68:5d:8d:b3:bd:40: c2:37:10:6a:6f:72:68:01:f7:6d:46:c5:01:72:1b: f4:b5:b8:f4:55:67:80:cf:15:ca:81:58:22:00:3d: 4f:3c:ae:7d:05:4d:c2:30:9e:bd:a8:64:52:04:a6: 10:95:0d:76:79:e0:3e:f2:d0:ad:a1:c2:11:30:08: 82:31:7f:94:02:27:6c:c5:56:62:37:f3:10:c3:30: df:0d:42:dd:1a:6f:9e:7d:34:a9:71:1f:0d:61:ca: 6c:c5:8a:a0:15:5d:89:2f:7b:66:71:ea:b4:ae:71: 1c:c3:ae:84:25:03:6b:47:81:a3:5a:cb:4d:30:f9: 56:c9:a8:73:14:6d:77:f6:7d:ee:4e:dc:b0:a1:11: 41:97:b6:30:3e:12:09:7b:3d:75:dd:d3:9c:6d:a2: 53:21:ec:bc:52:69:3a:86:b4:f9:6e:a5:9f:7a:cd: a1:05:00:07:d2:05:ba:78:d2:66:ee:e8:71:1d:de: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:05:0A:DC:A8:EB:91:F1:09:53:A9:63:FB:A8:74:BD:7E:A1:61:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl X509v3 Authority Key Identifier: keyid:3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer sbgp-ipAddrBlock: critical IPv4: 192.30.120.0/23 IPv6: 2620:71:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f7:3f:7e:8b:fe:f3:ef:a6:dd:22:29:2e:53:ea:d1:58:a3: a8:0e:f4:12:a9:21:a1:e0:24:96:a6:e6:1b:fe:fc:1e:47:0e: 58:82:d8:0a:51:00:7d:95:0d:27:bc:d2:02:0b:e0:9c:a7:d8: 7e:79:4f:de:41:ee:5a:91:84:79:74:df:9c:42:10:f8:75:ca: 2b:52:21:ff:06:a5:33:94:82:4d:18:f8:94:76:6d:22:43:e5: 9f:81:8c:ea:d5:dc:d8:c6:bd:14:31:93:5c:69:38:05:04:bc: 29:d8:fc:01:5a:73:1e:18:3f:9e:5a:11:ce:be:3a:77:f8:54: c6:95:fa:18:5e:cb:0f:45:f3:fc:d1:c5:c3:46:c7:fa:14:1a: 55:b7:cb:6e:44:fd:56:ee:91:92:28:24:1b:9e:4f:65:6b:a3: d9:ea:ac:d5:b5:4f:35:7d:dd:c2:f2:e2:be:92:7c:3c:07:18: 86:80:43:f0:ec:0d:c2:76:79:2f:0b:49:88:61:b9:83:53:5e: 35:32:e9:f9:75:64:67:11:1e:cf:78:56:00:d9:86:b8:2e:39: c4:a3:ae:96:70:5e:3e:c8:e8:27:c8:f4:c1:f3:a0:0c:23:b0: 5a:43:e2:6b:f8:dd:c4:eb:83:29:db:50:b4:76:1d:82:6b:38: d1:03:0c:d2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9j+Bl3ciDzrS7b4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI3ZGY2YzItZDYwYS00NDY3LTg1ZjItZGQ2ZDAwOWVh ZmU4MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk Y2E2NDhjZWMtYTNiYi00NDM3LTk1MzctY2E5NDU2MzAzZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Qp9prc0hXvmgj5uOjaipw1Ub7EFwQtNKrjH gnohwmvwLROO9h+XysiB9qUNOaAxMGxNa5q7eJIO3dRAPUrcJa3EhB1oXY2zvUDC NxBqb3JoAfdtRsUBchv0tbj0VWeAzxXKgVgiAD1PPK59BU3CMJ69qGRSBKYQlQ12 eeA+8tCtocIRMAiCMX+UAidsxVZiN/MQwzDfDULdGm+efTSpcR8NYcpsxYqgFV2J L3tmceq0rnEcw66EJQNrR4GjWstNMPlWyahzFG139n3uTtywoRFBl7YwPhIJez11 3dOcbaJTIey8Umk6hrT5bqWfes2hBQAH0gW6eNJm7uhxHd5q8wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIsFCtyo65HxCVOpY/uodL1+oWHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mjdk ZjZjMi1kNjBhLTQ0NjctODVmMi1kZDZkMDA5ZWFmZTgvM2RlZTA1ZWItZDYwYS0z NGZhLWE2YWEtOTI2MTBjNGZiY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjI3ZGY2YzItZDYwYS00NDY3LTg1 ZjItZGQ2ZDAwOWVhZmU4LzYyN2RmNmMyLWQ2MGEtNDQ2Ny04NWYyLWRkNmQwMDll YWZlOC5jcmwwHwYDVR0jBBgwFoAUO64ZO8R59vJZrRu4VuZf4R7fZI8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjdkZjZjMi1kNjBhLTQ0NjctODVmMi1kZDZk MDA5ZWFmZTguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwB54MA8E AgACMAkDBwAmIABxQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALfc/fov+8++m3SIpLlPq0VijqA70Eqkh oeAklqbmG/78HkcOWILYClEAfZUNJ7zSAgvgnKfYfnlP3kHuWpGEeXTfnEIQ+HXK K1Ih/walM5SCTRj4lHZtIkPln4GM6tXc2Ma9FDGTXGk4BQS8Kdj8AVpzHhg/nloR zr46d/hUxpX6GF7LD0Xz/NHFw0bH+hQaVbfLbkT9Vu6RkigkG55PZWuj2eqs1bVP NX3dwvLivpJ8PAcYhoBD8OwNwnZ5LwtJiGG5g1NeNTLp+XVkZxEez3hWANmGuC45 xKOulnBePsjoJ8j0wfOgDCOwWkPia/jdxOuDKdtQtHYdgms40QMM0g== -----END CERTIFICATE-----Generated at Thu Oct 15 15:21:56 2026 by rpki-client